85281cca080050cb742e79aa3aa32aea9bb8bf671edbfd5f9fb231b6432e0141

General

Target

85281cca080050cb742e79aa3aa32aea9bb8bf671edbfd5f9fb231b6432e0141
Size

349KB
MD5

c011653d226ee59f8d4f6b9395421072
SHA1

2f315a791ca53a0d81f83f75a4499a7d52a0da40
SHA256

85281cca080050cb742e79aa3aa32aea9bb8bf671edbfd5f9fb231b6432e0141
SHA512

3a9f371a047c42b0dba0eee0f11e872bc5c914b6437afc46f295328d33baaa05f31b074595e9670db6b0853ce4d5a355424f3668cba713a7987f6bbf08691110
SSDEEP

1536:oIgdHDoSd1xWpSn2xkaTGRv+vH9xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxj:oxoSr+vR2YSsyOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85281cca080050cb742e79aa3aa32aea9bb8bf671edbfd5f9fb231b6432e0141

Files

85281cca080050cb742e79aa3aa32aea9bb8bf671edbfd5f9fb231b6432e0141
.exe windows:6 windows x86 arch:x86

255662b5d98320df765109d5e2331246

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Prywatne\GITHUB\Calculator\Debug\Kalkulator.pdb

Imports

kernel32

IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
GetCurrentProcess
TerminateProcess
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId

ucrtbased

memset
_seh_filter_dll
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
abort
_configure_narrow_argv
_crt_at_quick_exit

vcruntime140d

_except_handler4_common
__FrameUnwindFilter

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 322KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

255662b5d98320df765109d5e2331246

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ucrtbased

vcruntime140d

mscoree

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 322KB - Virtual size: 322KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 576B

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 322KB - Virtual size: 322KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 576B